diff --git a/docs/discover/images/discover-add-filter.png b/docs/discover/images/discover-add-filter.png new file mode 100644 index 0000000000000..e6f4685d31d60 Binary files /dev/null and b/docs/discover/images/discover-add-filter.png differ diff --git a/docs/discover/images/discover-maps.png b/docs/discover/images/discover-maps.png new file mode 100644 index 0000000000000..42a17d6102b5c Binary files /dev/null and b/docs/discover/images/discover-maps.png differ diff --git a/docs/discover/images/discover-save-saved-search.png b/docs/discover/images/discover-save-saved-search.png new file mode 100644 index 0000000000000..bf22408729b08 Binary files /dev/null and b/docs/discover/images/discover-save-saved-search.png differ diff --git a/docs/discover/images/discover-search-field.png b/docs/discover/images/discover-search-field.png new file mode 100644 index 0000000000000..9acbf86067fb4 Binary files /dev/null and b/docs/discover/images/discover-search-field.png differ diff --git a/docs/discover/images/discover-sidebar-available-fields.png b/docs/discover/images/discover-sidebar-available-fields.png new file mode 100644 index 0000000000000..7f3514757eed5 Binary files /dev/null and b/docs/discover/images/discover-sidebar-available-fields.png differ diff --git a/docs/discover/images/discover-visualize.png b/docs/discover/images/discover-visualize.png new file mode 100644 index 0000000000000..f4bcaf8aca028 Binary files /dev/null and b/docs/discover/images/discover-visualize.png differ diff --git a/docs/discover/images/geoip-icon.png b/docs/discover/images/geoip-icon.png new file mode 100644 index 0000000000000..d3317451be3ea Binary files /dev/null and b/docs/discover/images/geoip-icon.png differ diff --git a/docs/user/discover.asciidoc b/docs/user/discover.asciidoc index 42ac1e22ce167..63982430927c1 100644 --- a/docs/user/discover.asciidoc +++ b/docs/user/discover.asciidoc @@ -3,9 +3,29 @@ [partintro] -- -**_Tell {kib} where to find your data, then search and filter it for hidden insights and relationships._** +**_Gain insight to your data._** + +*Discover* enables you to quickly search and filter your data, get information +about structure of the fields, and visualize your data with *Lens* and *Maps*. +You can customize and save your searches and place them on a dashboard. + +++++ + + +++++ -You’ve added your data, and now you’re ready to dig in. You have questions about your data. +[float] +=== Explore and query your data + +You have questions about your data. What pages on your website contain a specific word or phrase? What events were logged most recently? What processes take longer than 500 milliseconds to respond? @@ -23,9 +43,6 @@ that summarize the contents of the data. At the end of this tutorial, you’ll be ready to start exploring with your own data in *Discover*. -[role="screenshot"] -image::images/Discover-Start.png[Discover] - [float] === Prerequisites @@ -36,24 +53,6 @@ image::images/Discover-Start.png[Discover] - You should have an understanding of {ref}/documents-indices.html[{es} documents and indices]. -[float] -[[whats-you-goal-in-discover]] -=== Define your goal - -When you explore your data in **Discover**, it's common to start with one or two goals: - -- **Get an overview of what is happening.** -For example, you might look for -information on the overall health and performance of your ecommerce business, -and then share your findings in a report. - -- **Find an answer to a specific question.** You want -to determine your customers' shopping preferences, -and then visualize your findings on a dashboard. - -For this tutorial, your goal is to better manage your product inventory. You want to -know the top-selling products and on what day of the week these products sell the most. - [float] [[find-the-data-you-want-to-use]] === Find your data @@ -90,6 +89,9 @@ which can be overwhelming. You’ll modify this table to display only your field . Scan through the list of **Available fields** to see what’s in your data. You can also search for a field by name. ++ +[role="screenshot"] +image:images/discover-sidebar-available-fields.png[Fields list that displays the top five search results, width=50%] . Find the `manufacturer` field, and then click it to view the five most popular values for that field. + @@ -114,7 +116,13 @@ column header, and then use the move and sort controls. One of the unique capabilities of **Discover** is the ability to combine free text search with filtering based on structured data. -To search all fields, enter a simple string in the **Search** field. To search particular fields and +To search all fields, enter a simple string in the **Search** field. + +[role="screenshot"] +image:images/discover-search-field.png[Search field in Discover] + + +To search particular fields and build more complex queries, use the <>. As you type, KQL prompts you with the fields you can search and the operators you can use to build a structured query. @@ -137,6 +145,9 @@ You can filter results to include or exclude specific fields, filter for a value and more. The **Add filter** popup prompts you with the fields you can filter and the operators you can use. +[role="screenshot"] +image:images/discover-add-filter.png[Add filter dialog in Discover] + Exclude documents where day of week is not Wednesday: . Click **Add filter**. @@ -177,6 +188,9 @@ Saving a search saves the query and the filters. . In the toolbar, click **Save**. . Give your search a title, and then click **Save**. ++ +[role="screenshot"] +image:images/discover-save-saved-search.png[Save saved search in Discover, width=50%] [float] === Visualize your findings @@ -185,6 +199,9 @@ visualize it from **Discover**. . From the **Selected fields** list, click `day_of_week`, and then click **Visualize**. + +[role="screenshot"] +image:images/discover-visualize.png[Discover sidebar field popover with visualize button, width=75%] ++ {kib} creates a visualization best suited for this field. . Drag `manufacturer.keyword` from the field list and drop it on @@ -195,11 +212,26 @@ image:images/visualize-from-discover.png[Visualization that opens from Discover . Save your visualization for use on a dashboard. +If your documents contain geo point fields (image:images/geoip-icon.png[Geo point field icon, width=20px]), you can visualize them in **Maps**. + +. Make sure the index pattern is set to **kibana_sample_data_ecommerce** and the configured time range +contains data. + +. From the **Available fields** list, click `geoip.location`, and then click **Visualize**. ++ +[role="screenshot"] +image:images/discover-maps.png[Map containing documents] + +. Save your map for use on a dashboard. + + [float] === What’s next? * <>. +* <>. + * <> to better meet your needs. In **Advanced Settings**, you can configure the number of documents to show, the table columns that display by default, and more. @@ -208,8 +240,6 @@ the table columns that display by default, and more. * <>. -* <>. - -- include::{kib-repo-dir}/management/index-patterns.asciidoc[]